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SYSTEM AND METHODS FOR PROVIDING SECURITY IN A VOTING 

MACHINE 

CROSS-REFERENCE TO RELATED APPLICATION 
[0001] This application claims the benefit of U.S. Provisional Application 
No. 60/458,961, filed on April 1, 2003, the disclosure of which is incorporated by 
reference herein. 

BACKGROUND OF THE INVENTION 

1. Field of Invention 

[0002] This application relates to a voting system having an image recording 
device attached to one side of a voting machine that maintains secure voting election 
data information. 

2. Description of Related Art 

[0003] Conventionally, voting systems including a printing device are 
described as including a standard printer. The printer may be located either in the 
vicinity of the voting machine, locked within the voting machine, or integrated with 
the voting machine. However, various disadvantages are associated with such 
conventional voting systems. For example, in many countries a printed audit trail, 
such as a paper copy of the cast ballots, is required by law. Such a printed audit trail 
can be necessary in the case where a manual re-count of the votes is called for at a 
future date. The term printed audit trail describes a printed paper receipt summary of 
the candidates for whom a voter has voted, and thus can provide a hard copy of an 
election. For example, in the United States, when votes are being re-counted the 
paper ballots are taken out of storage and viewed by two poll workers, each of whom 
record the vote before the new results are tallied. As a result, it is important that the 
paper ballot or printed audit trail is an accurate representation of the each vote cast, 
and that the ballot has not been altered or tampered with. 

. [0004] Visibility is another disadvantage suffered by conventional voting 
systems. For example, conventional voting systems do not allow a voter to see the 
printed audit trail, and consequently the voter may not be given a high level of 
confidence that the voting system accurately recorded their vote. Further, in some 
conventional voting systems having printers, the voter can see the printed audit trail, 
but only after the voter has cast their vote. In this case, a voter must remember the 
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candidates that they had previously voted for, which may be difficult in situations 
where there are a large number of candidates to choose from, a number of positions to 
elect candidates for, or voters participating in several elections at once. 

[0005] Another significant disadvantage of the conventional voting systems 
is security. For example, in conventional voting systems, a voter can access the 
printed audit trail, and therefore could also alter or tamper with the printed audit trail. 
For example, in U.S. Patent Application Publication 2003/0006282 there is disclosed 
Systems and Methods for Electronic Voting showing a basic structure for a plurality 
of voting modules connected to each other through a network. However, as is evident, 
the invention fails to provide any device that provides security to the various parts of 
its system to ensure that the printed audit trail is not tampered with. All of the subject 
matter of the above application is incorporated herein by reference in its entirety. 

SUMMARY OF THE INVENTION 

[0006] Various exemplary embodiments of the systems and methods of this 
invention recognize a need for casting a vote and verification of its accuracy before 
the votes casts are archived. The present invention can provide a voting machine in 
which the printed audit trail can be compared with a summary on the display. Thus, 
voter confidence in casting a vote and verification of its accuracy, as well as improved 
security, compactness, reliability and ease of use can be improved. 

[0007] The systems and methods according to the invention provide for an 
optional, easily detachable, recording medium that maintains untampered accuracy 
and security of the voting election data information. In particular, the recording 
medium can be integrated into the voting system such that the voter can compare a 
summary of their selectable election choices visible on a visual display of a selection 
panel of the voting system, to the printed audit trail of that same summary while 
voting without the voter having to change their viewing angle. 

[0008] A method according to the invention provides for a voter to compare 
a printed audit trail summary of their selected votes to a visual display of the summary 
to ensure that the printed audit trail summary corresponds to the visual display of the 
summary, before accepting the selected votes and casting their vote. 

[0009] The systems and methods according to the invention can also provide 
for enhanced visibility in that the invention allows a voter to view the printed audit 
trail in a normal voting position, thus making it easier to see and compare the printed 
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audit trail with the summary displayed on the selection panel, while maintaining the 
privacy of the voter while in the normal voting position. 

[0010] The systems and methods according to this invention can also 
provide for improved voter confidence. Specifically, because the visibility of the 
printed audit trail is improved and the ease with which the printed audit trail can be 
compared to the visual display improves, a voter is more confident that their vote has 
been properly recorded. Specifically, the invention shows a voter that: a) the printed 
receipt or printed audit trail and the visual summary on the display of the selection 
panel are identical; b) the voter pressed the correct selection buttons to designate the 
intended candidates that the voter intended to vote for; c) the voting system has 
recorded these votes correctly, both on paper and electronically; and d) the summary is 
accurate and legible, and will be read correctly should a re-count of the votes be 
required in the future. 

[0011] The systems and methods according to the invention can also provide 
for improved security and tampering resistance of the image recording device. For 
example, the image recording device is specifically designed to be attached and 
detached, or to be integrated into the voting system. Attachment and detachment of a 
distinct image recording device in a specific manner is more secure than attaching a 
standard printer (i.e., one that can be bought commercially, for example an Epson, HP 
etc.) to a voting system, as described in the prior art. This is because a standard 
printer could easily be switched with another standard printer. However, according to 
the present invention, any such attempt to switch the image recording medium would 
be visually obvious since the image recording medium of the present invention looks 
distinctly different from a standard printer. Further, the image recording medium 
according to the present invention is designed to be attached or integrated into the 
voting system, whereas a standard printer is not designed to be attached or integrated 
into the voting system in accordance with this invention and would also not be 
compatible with the voting system for the intended purposes of the present invention. 
Manufacture, supply and transport of the image recording device could also be 
controlled, whereas these factors could not be controlled in the case of a standard 
printer. In addition, a standard printer allows easy access to its blank and printed 
paper, whereas the image recording device in the present invention ensures that its 
recording medium cannot be accessed without specific authorization. 
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[0012] The systems and methods according to the invention enable the 
image recording device to have a host of security features to prevent voters and/or 
other persons from removing and/or tampering with the recording medium, or the 
image recording device. 

[0013] The systems and methods according to invention can also provide for 
ease of transport. For example, the image recording device of the present invention is 
smaller and more compact than a standard printer, and thus is easier to transport and 
store. 

[0014] The systems and methods according to this invention provide for 
improved reliability. Specifically, the mechanism used in the image recording device 
is less prone to software and mechanical failure. 

[0015] According to the systems and methods of this invention, the image 
recording device incorporates a number of fail-safe devices to ensure the image 
recording device is running correctly and to inform poll workers of any mechanical or 
technical faults that may occur. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0016] Various exemplary embodiments of the systems and methods of the 
invention are described in detail below, with reference to the attached drawing figures, 
in which: 

[0017] Fig. 1 illustrates an exemplary illustration of a voting system 
according to this invention; 

[0018] Fig. 2. illustrates a perforated privacy shield attached to a voting 
machine in accordance with an alternative aspect according to this invention; 

[0019] Fig. 3 shows a reel-to-reel printer disposed within an open printer 
box of the voting system according to this invention; 

[0020] Fig. 4 shows an exemplary fastening mechanism in which a rail is 
attached to one side of the printer box in accordance with this invention; 

[0021] Fig. 5 shows a fastening mechanism including a holder attached to 
one side of the voting machine being fastened to a rail attached to the printer box 
according to this invention; 

[0022] Fig. 6 shows a perspective view of the printer box secured to the 
voting machine in a slotting manner according to this invention; 

[0023] Fig. 7 shows a construction of the voting machine disposed over the 
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printer box in an overlapping configuration according to this invention; 

[0024] Fig. 8 shows the construction and alignment of the recording device 
window relative to the display screen of the voting machine in an overlapping 
configuration according to this invention; 

[0025] Fig. 9 shows a first exemplary canister configuration according to 
this invention; 

[0026] Fig. 10 shows a second exemplary canister configuration according 
to this invention; 

[0027] Fig. 1 1 illustrates a logic procedure adapted to handle printing large 
ballots according to this invention; 

[0028] Fig. 12 shows an exemplary illustration of printing a carbon copy in 
accordance with this invention; 

[0029] Fig. 13 shows exemplary fail safe devices adapted for use with the 
recording medium according to this invention; 

[0030] Fig. 14 shows an exemplary method for voting according to this 
invention; and 

[0031] Fig. 15 shows an exemplary printer box having an adjustable 
recording device window in accordance with this invention. 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 

[0032] In accordance with the present invention, there is disclosed an 
example of a voting system having an image recording device that is attached to one 
side of a selection panel of a voting machine. Accordingly, a voter can compare 
information presented on a display screen of the selection panel to a receipt or printed 
audit trail printed onto a recording medium of the image recording device while 
voting and without the voter having to change their position or viewing angle. As 
described above, the printed audit trail is a hard copy of the election results that can be 
used by poll workers, subsequent to the election, to monitor voting results, such as 
confirming results by re-counting the votes. 

[0033] Fig. 1 illustrates an exemplary voting system 10 according to system 
and methods of the invention. As shown in Fig. 1, the voting system 10 can include a 
voting machine 100 having a selection panel 110 with a display screen 120, an image 
recording device 200 for generating print data 242 on a recording medium 210. The 
image recording device 200 can be a printer box 205 that is attached to the voting 
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machine 100. The image recording device 200 can be used to create a printed audit 
trail 244 that shows a voter's selections 248. The voting system 10 can include 
numerous privacy shields 300 to ensure privacy to a voter casting their vote. 

[0034] According to this exemplary embodiment, the voting machine 100 
shown in Fig. 1 can include a controller or processing apparatus 112. The processing 
apparatus 112 can be, for example, implemented as a programmed general purpose 
computer. However, the processing apparatus 112 can also be implemented as a 
special purpose computer, a programmed microprocessor or a microcontroller and 
peripheral integrated circuit elements, an ASIC or other integrated circuit, a digital 
signal processor, a hardwired electronic or logic circuit, such as a discrete element 
circuit, a programmable logic device such as a PLD, PLA, FPGA or PAL, or the like. 
In general, any device capable of implementing a finite state machine that in turn is 
capable of implementing the flowcharts shown in Figs. 1 1 and 14, can be used in 
accordance with the systems and methods of this invention. 

[0035] As shown in Fig. 1, the voting machine can further include a 
processing apparatus 112 having a link 12. As shown, the link 12 can couple the 
processing apparatus 1 12 to a network 15, database 16, or both. The link 12 can be 
any known or later developed device or system allowing the processing apparatus 112 
of the voting system 10 to communicate with the database 16 that stores electronic 
data information for use with the voting system 10, such as software to update and/or 
download the electronic data information for the voting system 10. Also, it should be 
appreciated that the link 12 of the voting system 10 connecting a memory of the 
processing apparatus 112 can be a wired or wireless link to a network 15. For 
example, the link 12 can be a direct connection 13, an indirect connection 14 over the 
network 15, for example, a wide area network or a local area network, a connection 
over an intranet, a connection over the Internet, or a connection over any other 
distributed processing network or system. 

[0036] Alternatively, a memory can be included in the detachable printer or 
the electronic data information can be stored on and recalled from electronic storage 
devices, such as a CD/DVD, or any type of known or later developed device that 
stores electronic data information. The electronic storage devices can be coupled to 
the processor 1 12 as needed. 
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[0037] The display screen 120 of the selection panel 110 can include a 
plurality of selection buttons 114 that control various operations of the voting system 
10. The selection buttons 114 may be selected manually by a voter, for example, by 
touching a touchscreen or the display screen 120 with a finger. Alternatively, an input 
device 116 can be used to select from among the various selection buttons 114. In 
various exemplary embodiments, the input device 120 may include, for example, a 
mouse, a keyboard, trackball, and any other known or later developed type of input 
device, such as a stylus, a keypad and a touchscreen. Additionally, the display screen 
can have a ballot contained within a protective plastic cover that is securely held 
above buttons or switches on the display screen. The buttons can correspond to the 
ballots so that when a voter selects a choice on the ballot, the corresponding 
underlying button is depressed, and thus the voter selection is recorded by the voting 
machine. As will be discussed in greater detail below, the display screen 120 can be 
constructed of one or more LCD cells so that the print data 242 or a portion thereof 
can be selectively displayed by turning on or off the LCD. 

[0038] The privacy shields 300 of the voting system 10 can be used to 
provide voter secrecy and privacy. The privacy shields 300 can be attached at various 
locations, for example, to one side of the printer box 205, and/or on either side of the 
selection panel 1 10 of the voting machine 100. The privacy shields 300 can be 
attached anywhere in the voting system 10 so long as the privacy shields 300 provide 
adequate privacy to the voter while casting their vote. The privacy shields 300 can be 
made of any material that is sufficient to provide privacy, for example, the privacy 
shields 300 can be composed of wood, plastic, metal, cloth material, and the like. It 
should be understood that the privacy shields 300 can be constructed in any 
arrangement that can provide sufficient privacy to the voter. 

[0039] Fig. 2. shows attaching a perforated privacy shield 301 in accordance 
with another aspect the invention. The perforated privacy shield 301 is shown 
attached to one side of the selection panel 110 of the voting machine 100. The printer 
box 205 is also attached to the same side of the selection panel 110. In this case, a 
hole 302 can be made in the perforated privacy shield 301 to allow viewing of a 
printed receipt (or printed audit trail) 244. 

[0040] Fig. 3 illustrates an alternative design in which a combined printer 
box/privacy shield 304 is attached to one side of the selection panel 1 10 of the voting 
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machine 100. As shown, the combined printer box/privacy shield 304 is combined 
with the printer box 205 as a separate unit apart from the voting machine 100. In 
operation, the combined printer box/privacy shield 304 is attached to one side of the 
voting machine 100. It should be understood that various modifications and 
arrangements for the privacy shields 300, 301 are possible without departing from the 
spirit and scope of the present invention. 

[0041] As also shown in Fig. 3, the printer box 205 of the image recording 
device 200 includes a container 220 with a cover 230 that can be removed. The 
printer box 205 is a self-contained unit that can be attached to the side of the voting 
machine 100 or can be built into the voting machine 100 as an integral component. 
The printer box 205 houses the recording medium 210. According to this exemplary 
embodiment, the recording medium 210 has a reel-to-reel configuration. 

[0042] In order to communicate with the voting machine 110, the printer 
box 205 can be designed to include integral electrical contacts, such that when the 
printer box 205 is fastened to the selection panel 1 10 of the voting machine 100, 
power up and data communication is initiated between the voting machine 100 and 
the printer box 205 of the image recording device 200. On the contrary, when the 
printer box 205 is not attached to the selection panel 1 14, it is not possible for the 
voter to vote because the voting system 101 will be rendered inoperable. According 
to the systems and methods of the invention, the printer box 205 can also be designed 
with a parallel or serial data interface for cable or cable-less communication with the 
voting machine 100. 

[0043] Figs. 4, 5 and 6 show an exemplary mode for attachment according to 
another aspect of the invention. According to this embodiment, a mechanism for 
fastening the printer box 205 to the voting machine 100 involves "slotting" which is 
similar to the mechanism for runners provided on sliding drawers. 

[0044] For example, Figs. 4 and 5 show a rail 234 attached to the side of the 
printer box 205. Fig. 5 shows a holder 236 fastened to a side of the voting machine 
100 facing the rail 234 on the printer box 205. As shown, the holder 236 has a 
receiving portion 237 adapted to receive the rail 234. By this configuration, the 
printer box 205 can be securely held to the voting machine 100. 

[0045] Fig. 6 shows the printer box 205 securely arranged on the voting 
machine 1 00 using the slotting manner. It should be understood that other modes for 
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fastening the printer box 205 to the voting machine 100 are also possible. For 
example, the printer box 205 may be secured by screws, and/or any other type of 
commercially available fastener that is capable of fastening the printer box 205 to the 
voting machine 100 according to this invention. Additionally, the fasteners may 
include locking mechanisms, such as a simple padlock, for restricting the removal of 
the printer box 205 by unauthorized persons. 

[0046] In addition, Fig. 6 shows the printer box 205 located behind a 
perforated privacy shield 301 . Accordingly, during operation, a user can view the 
printed data 242 on the recording medium 210 through the hole 302 in the perforated 
privacy shield 301. Additionally, another privacy shield 300 can be disposed between 
an open area between the printer box 205 and the perforated privacy shield 301 to 
improve privacy to the voter while the voter casts their vote. 

[0047] Figs. 7 and 8 show another exemplary embodiment in which the 
printer box 205 is integrated with the voting machine 1 00 in an overlapping 
configuration. As shown in Fig. 7, the printer box 205 can be attached behind the 
voting machine 100. According to this configuration, the recording medium 210 
(shown in hidden lines) is positioned directly behind the display screen 120 of the 
voting machine 100. In operation, various selectable choices 246 are displayed on the 
display screen 120 of the selection panel 110 while the data printed on the recording 
medium cannot be seen. A voter can select choices from the selectable choices 246. 

[0048] Access to the printer box 205 can be provided separate and apart 
from the access to the voting machine 100. This allows poll workers to remedy 
problems that arise within the printer box 205, such as to fix jams and/or to repair 
minor mechanical faults, without compromising the security of the votes casts by the 
voting machine 100. 

[0049] Fig. 8 illustrates the recording medium 210 in solid lines to 
exemplify the orientation of the recording medium 210 in relation to the display 
screen 120 of the voting machine 100. The voting machine 100 and the printer box 
205 are shown in hidden lines. At various predetermined times, the voter's selections 
248 from among the selectable choices 246 (as shown in Fig. 7) can be viewed by the 
voter on the printed audit trail or receipt 244 of the recording medium 210. 

[0050] As shown in Fig. 8, a voter can view a summary of the voter's 
selections 248 on the printed receipt 244 and compare them to the summary of 
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selectable choices 246 displayed on the display screen 120 of the voting machine 100 
at the same time, one on top of the other. This has the same effect as placing a traced 
image over an original, in that differences between the printed receipt 244 and the 
summary of selectable choices 246 chosen by the voter are immediately recognizable. 
After the voter has verified the accuracy of the voter's selections 248, the voter can 
then accept the selected choices and cast their vote. 

[0051] To avoid interference between the summary of selectable choices 246 
on the display screen 120 of the selection panel 110 and the printed receipt 244 
located behind the display screen 120, the printed receipt 244 can be selectively made 
visible. In other words, the voter's selections 248 on the recording medium 210 can be 
made visible to the voter at predetermined times by making the selectable choices 240 
on the display screen 120 transparent so that the voter can see marking on the 
recording medium 210. 

[0052] According to the systems and methods of this invention, the display 
screen 120 can be made of a material that is capable of becoming transparent to allow 
the printed receipt 244 to be visible and the images on the display screen to 
simultaneously be transparent. The clear material provided for the display screen 120 
can include, for example, amorphous silicon, a non-reflective display, a single large 
cell LCD or any other material capable of appearing transparent at under controlled 
stimulus. According to this feature of the invention, during operation the display 
screen 120 can be shown as opaque to hide the printed receipt of the previous voter 
244 on the recording medium 210 so that only the display screen 120 of the voting 
machine 100 can be seen (as shown in Fig. 7). When the next voters selections have 
been printed and the paper advanced far enough to ensure the previous voters 
selections are not visible, then a the control is activated to the display screen 120, 
display screen 120 is rendered transparent (as shown in Fig. 8) so that only the 
selected choices 248 printed on the printed receipt 244 behind the display screen 120 
of the voting machine 100 can be seen. The voter can easily compare the choices 
selected 248 from among the selectable choices 246 shown on the display screen 120 
of the voting machine 100 with the selected choices 248 printed on the printed receipt 
244 before the voter casts their final vote. Once the vote is accepted, the display 
screen 120 is once again made opaque as in figure 7 so that the voter's selections are 
no longer visible. In the alternative, the display screen 120 can be broken into 
segments so that the amount of the receipt 244 that is exposed can be adjusted to 
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match the amount of information needing to be displayed to the voter. This will allow 
using less receipt paper per voter. Various methods for providing a transparent visual 
display screen can include, for example, using holographic backlit diffusing materials 
and/or any other mode for providing transparency to the display screen 120. 

[0053] As shown by example in Fig. 3, the image recording device 200 is 
embodied as a reel-to-reel printer 280. The recording medium 210 of the reel-to-reel 
printer 280 is wound onto a flat surface 281 where the recording medium 210 is 
printed on. A print head 240 prints print data 242 on the recording medium 210. 
After the voter has reviewed and verified his selected choices 248, the print data 242 
on the recording medium 210 is scrolled onto a motorized take-up reel 284. The print 
data 242 is printed to the recording medium 210 behind a clear window 232, so the 
voter cannot tamper with the recording medium 210. 

[0054] An additional requirement for the printed receipt 244 in some 
jurisdictions is that it is stored in a random order so as to protect voter anonymity. 
Prior voting machines achieve this by cutting off each receipt and dropping it into a 
closed ballot box. This has the significant drawback that post-election handling, 
counting and storage of the receipts is unwieldy. The invention facilitates the random 
order with the use of bi-directional drive motors on both the supply and take-up reels 
of the reel-to-reel printer 280. Through the use of periodic indications on the paper, 
the position within the roll can be ascertained. The voting system can use a sensor 
appropriate to the method used for marking the paper. The voting system can then 
keep track of the paper position, and what portions of the paper roll are unused. When 
a receipt is to be printed, the voting system would, through the use of any standard 
randomizing method, choose a position for the receipt and, through the use of the 
bidirectional drive motors and paper position sensor mechanism, move the roll to that 
position before printing. Management of the paper and what portions are printed and 
blank, can be a function of either the printer mechanism 80 or the main voting 
machine, as appropriate to the design. 

[0055] It should be understood that the image recording device 200 is not 
limited to a reel-to-reel printer 280 and can include various other types of printers, 
such as a sheet paper-printer, or any other type of printing device known or later 
developed and that can be implemented according to the voting system 10 of this 
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invention. In addition, the recording medium 210 can include, for example, a thermal 
paper or any other print medium adapted for use with this invention. 

[0056] The reel-to-reel printer 280 of Fig. 3 includes a supply reel 282 and a 
take-up reel 284. The recording medium 210 is fed from the supply reel 282, across a 
flat surface 281, and onto the take-up reel 284. Secrecy of the votes cast is also 
maintained by winding the printed receipt 244 forward onto the take-up reel 284 until 
the print data 242 on the printed receipt 244 is scrolled out of sight. This ensures that 
the next voter to use the voting system 10 cannot view how the prior voter cast his or 
her vote. 

[0057] Ink is dispersed onto the recording medium 210 by the print head 240 
to generate the print data 242. As shown in Fig. 3, the print head 240 can be 
adjustably located between the supply reel 282 and the take-up reel 284. The ink used 
in the print head 242 to produce the print data 242 can be any type of conventional ink 
used in a printing device. As will be discussed in greater detail below, special types of 
inks can also be implemented in accordance with this invention. Additionally, the 
printer may be of a thermal type printer. 

[0058] Fig. 3 shows a cover 230 of the printer box 205 in an open position. 
The cover 230 of the printer box 205 includes the clear window 232 through which 
the printed receipt 244 on the recording medium 210 can be viewed. The clear 
window 232 provided for use with this invention can include, for example, a Plexiglas 
window or any other transparent medium through which an image can be seen. 

[0059] According to this exemplary embodiment, the cover 230 is fastened 
to the container 220 by a locking device 250 and a lock-receiving device 260. In 
various exemplary embodiments, the locking device 250 and the lock-receiving device 
260 can be replaced by any other suitable locking mechanism that is capable of being 
used with the present invention. 

[0060] Security and prevention of tampering with the printed receipt 244 in 
the printer box 205 is of high importance according to the systems and methods of this 
invention. A number of security features can be incorporated with the printer box 205 
to ensure that the printed receipts 244 are not altered or tampered with before, during, 
or after the election. These various security features fall into at least the following 
categories: 1) securing the printer box to the voting machine; 2) securing the printer 
box from tampering; 3) securing the connection between the printer box and the 
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voting machine; 4) securing the recording medium; 5) securing the printing; and 6) 
providing a security paper. 

[0061] Securing the printer box 205 to the voting machine 1 00 helps to 
ensure that the printer box 205 is not removed from the polling center by someone 
without authorization. The printer box 205 can have seals (as discussed later) 
attached at various locations in or around the printer box 205 to ensure that the printer 
box 205 is not detached from the voting machine 100 without detection. Such seals 
can be tamper-evident so that they show visible signs of forced removal, such as 
discoloration or tearing. In the alternative, locking mechanisms can be incorporated 
as part of the printer box 205. For example, using non-duplicatable keys or software 
interlocks can be provided. A software interlock links the physical locking 
mechanism of the printer box 205 to the software in the voting machine 100 to ensure 
that only authorized personnel can have access to the printer box 205. 

[0062] Fig. 3 shows an exemplary locking mechanism according to another 
aspect of this invention. The printer box 205 may be secured to the voting machine 
100, for example, by quarter turn fasteners 250, Velcro, and or any other type of 
commercially available fastener. Of course it should be understood that the fasteners 
250 can be of any type, and may also be lockable, such as by being capable of 
receiving a padlock or the like, so that the fastener cannot be opened without 
unlocking the padlock. As described above with reference to Figures 4 and 5, one 
mechanism for fastening the printer box 205 to the voting machine 100 involves 
"slotting" which is similar to the mechanism for runners provided on sliding drawers. 
However, any device capable of securing the printer box 205 to the voting machine 
100 can be used for fastening the printer box 205 to the voting machine 100 according 
to this invention. 

[0063] Securing the printer box 205 itself from entry is another example of a 
security feature that can be incorporated into the printer box 205 to ensure that the 
printed receipts 244 are not altered or tampered with before, during, or after the 
election. For example, the printer box 205 may be sealed with a tamper-evident tape 
or by providing a locking mechanism (see, for example, Fig. 3). The level and type of 
security used can depend on whether the person who is allowed to gain entry of the 
printer box 205 is allowed to have access to the recording medium 210, for example, 
to change the recording medium 210 or deal with a mechanical fault that should occur 
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within the printer box 205 during operation. Alternatively, a lock/unlock detection 
sensor 256 (Fig. 4) can be implemented into the box. 

[0064] If a poll worker is not to be given permission to open the printer box 
205, the entire printer box 205 can be configured to be changed when the recording 
medium 210 runs out. In this case, the security of the mechanism that attaches the 
recording medium 210 to the voting machine 100 is to be considered crucial. In order 
to determine if an unauthorized person has entered the printer box 205, various 
detection devices can be incorporated, for example, an RFED (Radio Frequency ID) 
can be integrated with printer box 205. That is, the printer box 205 can have an RFID 
or serial number attached to it or as part of the box 205 to ensure that the printer box 
205 itself is: a) authorized; b) in its correct location; and c) to prevent the printer box 
205 from being removed from the polling station without authorization. 

[0065] Additionally, Figs. 3 and 4 further illustrate the lock/unlock detection 
sensor 256. The lock/unlock detection sensor 256 can determine whether various 
components in the voting system 10 are locked or unlocked. For example, the 
lock/unlock detection sensor 256 can provide information to the controller about 
whether the cover 230 of the printer box 205 is open or closed. If the cover 230 is 
closed, operation of the voting system 10 will function normally. If, however, the 
cover 230 is open, the operation of the voting system 10 can be disabled. 

[0066] Securing the connection between the printer box and voting machine 
is another example of a security feature that can be implemented in accordance with 
this invention. The printer box 205 can be designed so that it "slots" into the voting 
machine 100 for a cable-less connection, similar to the mechanism used by laptops in 
desktop stations. This type of connection can ensure that voters and/or other persons 
will not interfere with the connection between the printer box 205 and the voting 
machine 100 either accidentally or on purpose. 

[0067] Securing the recording medium from access is yet another example 
of a security feature. Similar issues arise as to securing the recording medium 210. 
The exemplary recording medium 210 shown in Fig. 3 is a reel-to-reel printer 280. In 
order to prevent access to the recording medium 210, the recording medium 210 can 
be encased in a secure container or canister. 

[0068] Figs. 9 and 10 show a first exemplary canister and a second 
exemplary canister configuration, respectively. In Fig. 9, both the supply reel 282 and 
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the take-up reel 284 are encased in a first exemplary canister 286. The first exemplary 
canister 286 is similar in configuration to a 1 10 mm film canister that is removed as a 
single entity and cannot be opened without breaking a tamper-evident seal 287. The 
first exemplary canister 286 includes a canister window 289 through which the 
recording medium 210 can be viewed and printed on by the print head 240. 

[0069] Fig. 10 illustrates a second exemplary canister 288 configuration. 
According to this configuration, a supply/take-up reel 289 is encased in the second 
exemplary canister 288. The second exemplary canister 288 is similar in 
configuration to a 35 mm film canister that is removed as a single entity and cannot be 
opened without breaking a tamper-evident seal 287. An auto-load mechanism can 
also be integrated for exchanging a new recording medium 210 in either the first 286 
or the second 288 exemplary canisters when the previous recording medium 210 has 
been finished. 

[0070] Both the first exemplary canister 286 and the second exemplary 
canister 288 can be provided with RFID tags and/or unique serial numbers attached. 
In order to remove the printed receipts 244 from the canisters 286, 288, the canisters 
286, 288 will need to be disassembled, at which point the tamper-evident seal will be 
broken. The advantage of these canister configurations is that it allows access to the 
printer box 205 by poll workers and election officials in order to fix jams and/or 
provide other types of service, but retains the secrecy and security of the printed 
voting receipts 244 by preventing access to the recording medium 210. 

[0071] Security printing using special types of ink is another example of a 
security feature that can be used in accordance with the systems and methods of the 
present invention. For example, the ink used in the print head 240 of the image 
recording device 200 can include security inks, such as an IR, a UV, a Fluorescence 
and the like. The purpose for providing this type of an ink is to further maintain 
security when printing the printed receipt 244. In this case, the printer box 205 can be 
adapted to contain LED's emitting light at a predetermined wavelength, in order for 
the voter to view the print data 242. According to one example, the LED's could be 
switched on, allowing the voter to view the printed receipt 244, and switch off once 
the voter has verified the accuracy of the printed receipt 244. This will ensure that the 
next voter cannot view any prior voting printed receipts 244. 
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[0072] In addition, "invisible" information can be added to the visible voting 
summary or printed receipt 244 to further ensure security that the printed receipt 244 
is authentic and has not been tampered with. 

[0073] Using specific types of recording medium or a security paper is 
another example that can ensure secure printing in accordance with the systems and 
methods of the present invention. For example, the recording medium 210 used in the 
reel-to-reel printer 280 could also have additional security features on it, for example, 
holograms, threads, intaglio print, watermarks and the like. The presence of this type 
of a security feature would make the recording medium 210 very difficult to 
counterfeit and provide additional assurance that the recording medium 210 was 
authentic and has not been tampered with. 

[0074] According to the systems and methods of this invention, the image 
recording device 200 can print a variety of different types of information, in a number 
of different ways, by for example: 1) printing a summary of a voter's selected 
choices; 2) printing each transaction undertaken by the voter or pollworker; 3) printing 
each transaction as a coded number; 4) printing information relating to the voter; 5) 
printing information relating to the image recording device and/or the voting machine; 
6) printing each transaction undertaken by poll workers; 7) printing small ballots; and 
8) printing a carbon copy. 

[0075] In particular, printing a summary of a voter's choices is an example 
of a precautionary step that can be taken to ensure the accuracy of the intended 
selected choices 248 by the voter prior to casting their vote in accordance with the 
systems and methods of the present invention. The summary of the voter's selected 
choices 248 may be readable by humans and/or may be machine-readable. In this way 
both a voter and the voting machine 100 can verify the accuracy of the printed receipt 
244. The machine-readable printed receipt 244 can be scanned and used to cast a 
vote, or scanned in the case of a re-count, for example using OCR software or any 
other software capable of being used in accordance with the present invention. 

[0076] Auditing the correct operation of the voting system is another 
important function available with the printer. To supplement the printed vote 
summary, the printer can print a record of each action taken by the voter and 
pollworker. With such a record, it is possible to reconstruct actions during the 
election and determine if there were failures, for example, to prevent controversy 
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when a large number of voters apparently made the effort to come to the polls but cast 
blank ballots. This is a benefit that a simple summary printout of votes does not 
provide. The information printed in this mode could include the record of each screen 
touch made by the voter, additional operations such as canceling a ballot and 
maintenance functions, such as checking the touchscreen calibration. The form of the 
entries in this audit log could be of a form "Touch at X=123 Y=456", "Voter 
Activation Card Inserted", "Candidate X Selected", "Candidate Y deselected", etc. or 
any other human or machine readable method. 

[0077] Printing each transaction undertaken by the voter in real-time is 
another example of the type of information that can be performed by the voting 
system 10. This can be performed at a logical level, for example "Tony Blair 
selected", "Tony Blair deselected," or at a raw input level, i.e., the screen coordinates 
of each touch the voter makes. Especially if the raw input is recorded, the recording 
function could be a mechanism totally independent of the voting machine 1 00, 
implemented either in software or as a separate hardware module. Recording the raw 
input has the advantage in that it verifies the operation of the voting machine 100, i.e., 
that the transaction recorded does in fact correspond to a screen coordinate or selected 
choice 248 that was touched. 

[0078] Printing each transaction as a coded number is yet another example 
of the type of operation that can be performed by the voting system 10. As an 
alternative to the real-time printing described above, the image recording device 200 
can print a unique number that relates to each transaction undertaken by the voter. 
This option would cut down on (or compress) the amount of information being 
printed, and could be printed either: a) at the end of voting, after a summary of the 
voter's candidate choices has been shown and verified by the voter; b) after a certain 
number of transactions have been carried out, for example after each 10 transactions; 
c) after each individual transaction, and/or d) each time a specific transaction is 
carried out, for example when the voter is asked "do you wish to continue?" and 
presses an "OK" button. 

[0079] Printing information relating to the voter is an example of the type of 
information that can be printed by the image recording device 200 to ensure the 
identity and security of the voter. The image recording device 200 can print a random 
encryption code that ties the printed receipt 244 to the electronic selectable choices 
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246 reviewed by the voter, and in turn identifies the voter. This allows a complete 
audit trail log to be produced on the printed receipt, while maintaining the secrecy of 
the voter. 

[0080] Printing information relating to the image recording device and/or the 
procedure by which security to the voting system 10 can be ensured. The image 
recording device 200 can print the serial number of the voting machine 100 that it is 
attached to, its own serial number, or any other information relating to where the 
image recording device 200 is located, including the time and type of election. 

[0081] Printing each transaction undertaken by poll workers can also ensure 
security to the voting system 10. The image recording device 200 can print to the 
printed receipt 244 all mechanical operations undertaken on or to the voting machine 
100 and/or the image recording device 200 during voting. For example, operations 
such as replacing the recording medium 210, opening the image recording device 200 
to fix a jam, replacing the image recording device 200 and the like may be recorded, 
along with the name of the poll worker carrying out the transaction. This allows for a 
complete election audit trail to be produced on the printed receipt 244. 

[0082] According to another aspect of the invention, the handling, reviewing 
and printing of large ballots are examples of the type of information that can be 
printed by the image recording device 200. None of the "receipt under glass" systems 
in the prior art have yet addressed how to handle ballots that are larger than the size of 
a window of a printer. In accordance with the present invention, it is an aspect of this 
invention to manage multiple pages, and perhaps to scroll the recording medium 210 
backwards and forwards in the window of the printer box 205 based on the size of a 
ballot and the recording device window 207 of the printer box 205. 

[0083] Fig. 1 1 illustrates a logic procedure adapted to handle printing large 
ballots according to the systems and methods of the invention. 

[0084] In particular, a control routine begins at step SI 00. The control 
routine continues to step S200, where the voting system queries the image recording 
device for a size of a recording display window of a printer box of an image recording 
device. The objective is to handle ballots that are larger than the size of the recording 
device window. To do so requires logic to manage multiple pages, and perhaps to 
scroll the paper backward and forward in the recording device window. The control 
routine continues to step S300. 
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[0085] In step S300, the voting system determines whether a ballot is too 
large to fit into the recording device window of the printer box. If not, control 
proceeds to step S400 in which the printed audit trail is printed to the recording 
medium for review and acceptance by the voter. However, if in step S300 the printed 
receipt is too large to fit into the recording device window of the printer box, then 
control will proceed to either step S 5 00 or step S700 depending upon the 
circumstances. 

[0086] In step S500, the voting system will print the printed receipt one page 
at a time and allow the voter to review each page and accept each choice on each page 
individually. Control then proceeds to step S600. 

[0087] In step S600, when all pages of the printed receipt have been 
reviewed and accepted, the ballot is recorded by the voting system. Control then 
proceeds to step SI 100 in which the control routine ends. 

[0088] If, however, in step S300 the printed audit trail is too large to fit into 
display, the control routine can be programmed to proceed to step S700 in which the 
entire printed receipt is printed all at once. Control then will continue to step S800. 

[0089] In step S800, the control routine will cause the printed receipt to back 
up to the beginning of the printed receipt for review by the voter. Control then will 
proceed to step S900. 

[0090] In step S900, the voting system allows the voter to scroll forward and 
backward over the printed receipt by operating specific selection buttons. The control 
routine then continues to step SI 000. 

[0091] In step SI 000, when all choices in the printed receipt have been 
reviewed and accepted by the voter, the ballot is recorded. Control then proceeds to 
step SI 100 in which this process ends. 

[0092] Printing small ballots can also be managed by the image recording 
device 200 according to the systems and methods of the present invention. 
Considerable paper is wasted for small ballots if the recording device window 232 is 
too large, such as when the recording device window 232 is constructed large enough 
for the largest possible ballot. One solution is to implement a recording device 
window that is adjustable from election to election based on the number of items 
displayed in the recording device window. The amount of space required for printing 
onto the recording medium can be reduced by adjusting the location of the print head 
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240 relative to the recording medium 210. As a result, the amount of recording 
medium 210 used by each voter can be minimized where the entire amount of the 
recording medium exposed by the recording device window 232 is not necessary for 
printing. 

[0093] Furthermore, as shown in Fig. 15, the recording device window 232 
itself can be adjustable. The recording device window 232 can be reduced or enlarged 
based on the size of the ballot. This can be accomplished by inserting a mask or insert 
400 over or under the recording device window 232. Alternatively the recording 
device window 232 can include a liquid crystal type mask that can variably become 
opaque so that only a portion or window of the recording device window 232 is 
transparent. In other words, based on the amount of space needed to view the 
selectable choices 246 on the recording medium 210, the liquid crystal type mask can 
be activated to create a corresponding transparent window encompassing the selected 
choice while "blacking out" the rest of the recording device window 232. 

[0094] Further, when a mask or insert 400 is used, sensors can be 
implemented within the printer box 205 that sense the size of the mask 400 and 
transmit the size of the mask 400 to the controller 112. The controller 112 can then 
control the printing to occur in the visible portion of the recording device window 
232. Also, the controller 112 can determine an appropriate size for the recording 
device window 232 based on the ballot and adjust the recording device window 232 
accordingly so that it corresponds to selectable choices 246 displayed on the display 
screen 120 of the voting machine 100. With a mask or insert 400, this can include 
indicating to the pollworker which size mask 400 to insert. With a liquid crystal type 
mask, this can be more automated, whereby the controller instructs the liquid crystal 
type mask to adjust to an appropriate size, shape and location. 

[0095] Fig. 12 shows an exemplary illustration of printing a carbon copy in 
accordance with the systems and methods of the present invention. The printed 
receipt 244 can be printed on a carbon paper to provide two paper ballot copies. In 
particular, Fig. 12 shows a reel-to-reel printer including a supply reel 282, a take-up 
reel 284 and a carbon copy take-up reel 285. The recording medium 210 is backed 
with a carbon copy 212. According to this embodiment of the invention, the paper on 
the supply reel 282 is split and wound onto two separate take-up reels. That is, inside 
of the printer box 205, the recording medium 210 is wound onto the take-up reel 284 
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and the carbon copy 212 is wound onto the carbon copy take-up reel 285. In this case, 
if any doubt is cast on the integrity of either the recording medium 210 or the carbon 
copy 212, the other set can be referred to for verification. 

[0096] According to the systems and methods of this invention, various fail- 
safe devices can be implemented to alert pollworkers and voters of mechanical faults, 
reel changes and/or other problems. The voting system 10 can include, for example: 
1) standard parallel or serial port control signals; 2) handshaking controls; 3) optical 
sensors; 4) paper detection sensors; 5) motion sensors; 6) lock/unlock detection 
sensors; and 7) paper-out sensors, and the like. 

[0097] To detect whether the printer is still connected and operating, 
standard parallel or serial port control signals or special handshaking between the 
voting machine 100 and the printer box 205 can be incorporated. In operation, if the 
image recording device 200 stops responding to requests to print or is disconnected, 
the voting system 10 can be controlled to halt its voting operations and an error 
message is displayed which then holds up the voting. 

[0098] Fig. 13 shows that in the event that the print head 240 fails to 
operate, a print head failure sensor 251 can be placed immediately after the print head 
242 to detect whether the recording medium 210 coming from the print head 242 
contains markings on the recording medium 210 to determined whether the print head 
242 is functioning correctly. 

[0099] According to the systems and methods of this invention, the sensors 
implemented in accordance with this invention can include, for example, optical, 
mechanical, electrical, solid state, magnetic, and the like, as well as any other type of 
sensor now known or later developed and that can be used in accordance with the 
present invention. 

[0100] Handshaking between the voting machine 100 and the printer box 
205 can also be implemented to determine whether normal operation is occurring 
between the two devices. In other words, the voting machine 1 00 and printer box 205 
can electronically communicate with each other according to a pre-established 
communication protocol. Detecting that the voting machine 100 is not operating can 
take the form of periodic handshakes between the voting machine 100 and the printer 
box 205. That is the voting machine may periodically electronically interrogate the 
printer box 205 to ensure proper connection and operation. If the printer box 205 has 
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a printed receipt 244 displayed and the voting machine 100 has stopped operating, an 
error code can be displayed on either the display screen 120 of the voting machine 100 
or printed to the recording medium 210 to alert the voter that the voting system 10 is 
not operating correctly. In this case, the error code can be immediately printed on the 
printed receipt 244 and the recording medium 210 can then be advanced out of sight 
to maintain the privacy of the voters selected choices 248. 

[0101] Fig. 13 further illustrates providing the ability to determine whether 
the recording medium 210 used is new or has already been printed. To ensure that the 
recording medium 210 coming out of the reel-to-reel printer 280 is blank, a raw paper 
detection sensor 252 can be placed immediately before the print head 240. Security to 
the recording medium 210 can be further ensured because it would be possible to 
determine whether a third party tampered with or pre-printed on the recording medium 
210 and tried to pass it off as a "raw" recording medium having no markings thereon. 

[0102] Additionally, Fig. 13 illustrates determining whether a paper jam is 
present. In particular, this can take the form of providing motion sensors 253, 254 at 
the supply reel 282 and the take-up reel 284 respectively. The motion sensors 253, 
254 can communicate with the controller to sense and indicate whether a speed at the 
supply reel 282 appropriately corresponds to a speed at the take-up reel 284. This will 
ensure that the recording medium 210 is moving at an appropriate predetermined 
speed indicating that the recording medium 210 is not jammed. 

[0103] Fig. 13 further illustrates consumable monitoring. That is, 
monitoring whether the image recording device 200 is out of the recording medium 
210. Fig. 13 shows a paper-out sensor 255 located adjacent to the supply reel 282. It 
is an object of this invention to determine how much raw recording medium 210 is 
available and how much has been printed on, in terms of the number of printed 
receipts 244 for a given ballot size. Additionally, the sensors could be used to 
accurately position the paper. 

[0104] According to this invention, various special needs can also be 
accommodated by the systems and methods of this invention. For example, those 
hard of hearing, those who have difficulty with sight, or those that require printing in 
another language can be accommodated by the voting system 10. 

[0105] The printed receipt 244 can be printed in a machine-readable format, 
for example, on a paper-punch tape so that the printed receipt 244 can be scanned or 
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read and converted into an audio account of the transaction record. Alternatively, 
OCR and text to speech technology could be used. This would allow blind or partially 
sighted users to verify the printed receipt 244 prior to casting their vote. 
Alternatively, an electronic record of the votes made could be kept and read back to 
the voter prior to the votes being cast. 

[0106] The voting system 10 can be configured to accommodate several 
different languages for any voter in a language that the voter feels most comfortable in 
casting their vote. The printed data 242 on the display screen 120 of the voting 
machine 100 and/or the printed receipt 244 can be printed in the voter's native 
language, as well as English or any other language(s) required by voting laws. 
Alternatively, an English-language translation of a summary of the printed receipt 244 
can be printed on the recording medium 210 after the voter has verified the printed 
receipt 244. 

[0107] The voting system 10 can also be configured to accommodate a 
variety of different font sizes. That is, the printed receipt 244 can be printed in a 
larger font to aid those users with poor sight. 

[0108] The clear window 232 located over the printed receipt 244 can have a 
magnifying effect to make it easier for the users that are far-sighted or have poor sight 
to more easily view the printed receipt 244. 

[0109] In accordance with a further aspect of this invention, illumination can 
be provided to the clear window 232 in order to view the printed receipt 244. There is 
a fundamental mismatch in viewability between the, for example, backlit, high- 
contrast LCD screen of the display screen 120 used for the voting machine 100 and 
the illumination being provided to the printed receipt 244, especially in low light 
conditions. To help the mismatch in lighting characteristics, the clear window 232 
can be illuminated. This illumination can be controlled by the voting machine 100, so 
that the clear window 232 is only turned on when there is a printed receipt 244 in the 
clear window 232. Alternatively, illumination of the clear window 232 can be 
controlled by sensors, such as for example, ambient light sensors, and the like. 

[01 10] In the former case, the clear window 232 may be illuminated to view 
the printed receipt 244 after he or she has picked all their choices. Illumination can 
also occur just before the printed receipt 244 is wound onto the take-up reel 284, but 
before the next voter has approached the voting system 10 to casts his or her vote, 
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thereby ensuring the votes are kept secret. As mentioned before, the illumination may 
also consist of LED's emitting light at different wavelengths to reveal IR, UV, 
Fluorescence or other security inks. 

[0111] Fig. 14 shows an exemplary method for voting according to the 
systems and methods of the present invention. 

[0112] In particular, a control routine begins in step S2000. The control 
routine continues to step S2100, where selectable choices are displayed on a display 
screen of a selection panel of a voting system for a new voter. The control routine 
then continues to step S2200. 

[0113] In step S2200, the voter selects from among the displayed selectable 
choices. Control then proceeds to step S2300. 

[0114] In step S2300, the voter updates and/or corrects the selected choices 
that they have chosen. Control then continues to step S2400. 

[0115] In step S2400, the voting system displays a summary of selected 
choices on the display screen of the selection panel after the voter has viewed and 
voted from among some of the selectable choices. Control continues to step S2500. 

[0116] In step S2500, a copy of the summary of the selected choices is 
printed as a printed receipt (or printed audit trail) to a recording medium adjacent to 
the display screen. Control then continues to step S2600. 

[0117] In step S2600, the voter compares the summary of selected choices 
printed to the recording medium with the selected summary displayed on the display 
screen of the selection panel to ensure that the choices selected printed on the 
recording medium are identical to the choices selected on the display screen. Control 
then continues to step S2700. 

[0118] In step S2700, a determination is made whether the choices selected 
by the voter are identical. If not, control proceeds to step S3 100 in which the voter 
designates "CANCEL" to decline the summary of choices selected. Control then 
continues to step S3200. 

[0119] In step S3200, "void" or the like is printed on the printed receipt and 
the vote is not cast. The control routine then returns to step S2300 in which the voter 
is then again allowed to update and/or correct the selected choices previously chosen. 

[0120] However, if in step S2700, the selected choices are identical, the 
control routine proceeds to step S2800. 
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[0121] In step S2800, the control routine determines that the voter to accepts 
the summary of the selected choices. Then, the control routine proceeds to step 
S2900. 

[0122] In step S2900, the term "ACCEPTED" or the like is printed on the 
printed receipt and the vote is cast. The control routine then proceeds to step S3000. 

[0123] In step S3000, the recording medium is advanced on an image 
recording device until the selected choices are out of sight so that the next voter using 
the voting system cannot view how the previous voter cast his or her vote. Control 
then proceeds to step S3300. 

[0124] In step S3300, the receipts are collected and taken to a secure 
location to be stored as required by law. Control then proceeds to step S2100 in 
which a new set of selectable choices are displayed on the display screen of a selection 
panel of the voting system for a new voter. The control routine then repeats itself 
again from step S2100 through steps S3300. 

[0125] While the invention has been described with reference to preferred 
embodiments thereof, it is to be understood that the invention is not limited to the 
preferred embodiments or constructions. To the contrary, the invention is intended to 
cover various modifications and equivalent arrangements. In addition, while the 
various elements of the preferred embodiments are shown in various combinations 
and configurations, which are exemplary, other combinations and configurations, 
including more, less or only a single element, are also within the spirit and scope of 
the invention. 



